Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3133312e302e3130342e302f32322d3232203d3e203232393237.roa
File:                     3133312e302e3130342e302f32322d3232203d3e203232393237.roa (raw, json)
Hash identifier:          iuognaY5W1EuZjk74X31kyDqgROqSxuNjOJersqL5mI=
Subject key identifier:   AE:BE:D2:B7:66:F4:00:D2:C5:01:EC:F6:14:81:E3:A8:3A:E6:47:25
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       143439EFA9A32FBA58947C9C8E98EC21C16F5D63
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3133312e302e3130342e302f32322d3232203d3e203232393237.roa
Signing time:             Fri 03 Jan 2025 14:00:00 +0000
ROA not before:           Fri 03 Jan 2025 13:55:00 +0000
ROA not after:            Fri 02 Jan 2026 14:00:00 +0000
asID:                     22927
IP address blocks:        131.0.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:34:39:ef:a9:a3:2f:ba:58:94:7c:9c:8e:98:ec:21:c1:6f:5d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jan  3 13:55:00 2025 GMT
            Not After : Jan  2 14:00:00 2026 GMT
        Subject: CN=AEBED2B766F400D2C501ECF61481E3A83AE64725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9f:fb:75:e0:72:56:38:2c:7a:88:1a:69:e4:
                    95:fe:45:0a:28:55:06:5c:d7:17:11:54:84:ff:a0:
                    f5:f4:4f:f1:8d:af:9b:aa:30:63:b2:e2:9a:26:2f:
                    d5:34:9d:99:ca:0e:7a:90:ca:9f:96:6a:fc:84:ac:
                    de:50:d9:e1:5d:84:e1:5d:40:b1:52:e6:2a:74:33:
                    52:b6:25:d6:f0:90:c1:d9:f3:87:6e:eb:9a:63:35:
                    ec:ab:51:83:e9:0e:ef:75:25:bf:4e:b6:92:47:c3:
                    99:be:57:26:55:5a:fc:cb:76:bb:dc:86:bf:f0:ec:
                    91:55:34:9c:ed:28:01:10:6e:df:dd:ec:93:34:d4:
                    2d:01:66:94:18:0a:fe:e9:64:9f:13:c2:06:ae:78:
                    a1:7d:26:ca:ca:19:0d:97:e9:c5:8e:51:ba:15:49:
                    54:41:d5:fa:66:da:18:88:33:32:01:9d:45:3f:06:
                    0f:03:e4:de:c8:63:79:6e:93:65:bf:72:b2:d7:80:
                    ff:28:96:5b:36:a5:9d:e7:fc:7d:ed:33:f8:95:98:
                    7e:e9:d4:e9:f2:4b:26:51:68:2e:c0:35:f1:fc:01:
                    11:28:1b:fa:11:c6:90:90:bf:a5:7f:6a:24:5a:5f:
                    95:0d:e4:bd:1d:47:76:07:73:2d:3a:2d:8a:bf:d7:
                    7a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BE:D2:B7:66:F4:00:D2:C5:01:EC:F6:14:81:E3:A8:3A:E6:47:25
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3133312e302e3130342e302f32322d3232203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:41:c7:85:9e:e5:a8:57:9d:06:83:c2:5c:75:fd:d9:ea:b3:
         de:90:bc:39:69:11:bd:bf:80:78:c0:85:25:c9:3d:10:70:64:
         11:09:cb:04:93:cc:2e:52:45:83:ce:c6:b0:73:b7:0b:27:9c:
         ce:08:31:b8:89:e8:11:74:a1:86:86:f6:95:9d:3e:f0:55:07:
         2b:91:67:07:aa:5c:4e:22:b5:5c:a8:3f:b6:e6:e3:a5:2b:e5:
         fc:e6:c4:c3:d8:7d:83:e6:1d:e0:94:e3:26:98:d7:b2:f2:fd:
         93:e0:1c:aa:65:90:33:6d:4c:59:5d:96:83:e7:83:f1:9e:89:
         98:14:e1:b9:f5:ea:1f:1d:4b:45:00:fd:37:92:8f:cc:24:df:
         b1:80:a7:aa:dc:13:84:67:d9:44:9b:33:ee:fd:46:f1:fc:8b:
         3d:6b:32:b5:af:9a:a2:4a:73:eb:85:12:04:60:fb:35:9b:fd:
         58:7d:20:3b:ac:b3:a7:5f:ed:8b:10:9d:e2:7f:85:5c:ed:a7:
         cd:58:65:58:5a:3c:b0:49:04:42:20:50:41:0a:a3:73:68:8d:
         8b:07:02:03:c0:ad:d9:dd:f1:91:f1:e3:9e:6b:a4:a1:fc:d3:
         92:6d:c4:79:36:d6:21:4c:55:69:7b:e8:4e:1b:80:30:5d:64:
         f2:cb:ed:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:48 2025 by rpki-client